Clinic Mastery Marketing

Compliance

Can you ask patients for Google reviews? Where AHPRA draws the line

Patients can say what they like. The rules have only ever been about what you do with it next.

By Pete Flynn · 27 July 2026 · 8 min read

This question comes up in almost every onboarding call we run, usually phrased as a worry rather than a question. Are we allowed to ask patients for Google reviews? Are we in trouble for the ones we already have?

The confusion is understandable, because two different things get bundled together. What a patient says about you, and what you then do with it. AHPRA has only ever been interested in the second one.

Here is where the line sits, what safely works on either side of it, and the four habits that get clinics into trouble no matter which side they are standing on. This is how we brief it for the clinics we run ads for, not legal advice. AHPRA's own advertising guidelines are the source worth reading.

The line, drawn once

A patient left you a five star review. Can you use it?

Where you start

The review is sitting on your Google Business Profile, in the patient's own words.

Branch one

You leave it where they put it.

Fine

Nothing to do.

Patients post what they like. Your profile carrying their words is them talking about you, not you advertising. You are not required to take it down, and you cannot control it anyway.

Branch two

You want to put it in your advertising.

Your website, a Google ad, a social post, a printed flyer, the wall of the waiting room. Now the question is what the review is actually talking about.

No

Their care, their symptoms, how they felt after.

That is a testimonial about the clinical side of a regulated health service. It does not matter that it is genuine, that they wrote it themselves, or that it was public first.

Check first

Reception, parking, the wait, how easy booking was.

Comments about the experience rather than the care sit outside the testimonial line. Read the whole quote before you use it. One sentence about pain easing drags the rest of it across.

True on every branch, before you ask anyone for anything

Ask everyone, not just the happy ones

Inviting only the patients you expect to say something nice is review gaming, and it is the part regulators treat as your conduct rather than theirs.

Never offer anything in return

A discount, a voucher, a draw entry, a free add on. Any inducement turns a patient's opinion into something you paid for.

Never write it for them

No drafts, no suggested wording, no editing what they send you first. The words have to be theirs or they are your advertising.

Reply without confirming a patient

Thank them for the feedback in plain, non clinical language. A reply that names their treatment or confirms they were seen puts their privacy on your shoulders.

The whole point

The review is theirs. The advertising is yours. The rules only ever apply to your half of that.

Two different things that keep getting confused

Your patients are free to post whatever they like about you on Google. They are members of the public writing on a platform you do not own and cannot control. Your Google Business Profile carrying those reviews is not you advertising, and you are not expected to police them or take them down.

Your advertising is a different thing entirely. Your website, your Google Ads, your Meta ads, your social posts, your printed material, the wall of the waiting room. Anything you publish to promote a regulated health service sits under Section 133 of the National Law, which prohibits testimonials about the clinical aspects of that service.

A testimonial, in AHPRA's framing, is a recommendation or a positive statement about the clinical side of the service, made by someone who received it. The line is what the statement is about, not who wrote it or where it first appeared.

The review is the patient talking. Your advertising is you talking. The rules have only ever been interested in the second one.

The line is what you do with it

So the question is never whether the review exists. It is whether you have picked it up and used it to promote yourself.

Leaving a glowing review where the patient posted it is fine. Pasting the same sentence onto your home page, into an ad headline, or over the top of a social tile is the moment it becomes a testimonial in your advertising. It does not matter that it is genuine, that they wrote it unprompted, or that it was public before you touched it.

The nuance worth holding on to is that not every review is about clinical care. A comment about reception, parking, how easy the booking was, or how well someone explained things is describing the experience, not the treatment. Those sit outside the testimonial line. Read the whole quote before you use one, though. A single sentence about pain easing drags the rest of it across.

Crosses the line

  • A sentence from a review about how someone's pain improved, pasted onto your home page.
  • Review text pulled into a Google ad automatically by an extension nobody switched off.
  • A social tile built around a patient's description of their treatment and how it went.
  • A before and after story shared on your feed, in the patient's own words.
  • A reply that thanks a reviewer for sharing how much better they feel.

Stays inside it

  • The review sitting on your Google Business Profile where the patient left it.
  • Your overall star rating and review count shown as a rating, without the words.
  • A comment about parking, reception or how easy booking was, quoted in full.
  • A short, plain reply thanking someone for their feedback.
  • Your own description of what you treat, how you work, and how soon someone can be seen.

Asking for reviews is allowed. Asking badly is not.

You can ask patients for a Google review. Nothing prohibits it, and for local search it is one of the more useful things a clinic can do. What you cannot do is shape the outcome.

Ask everyone, not only the patients you expect to be pleased. Inviting the happy ones and skipping the rest is the part that reads as gaming a review platform, and it is your conduct rather than the patient's.

Never offer anything in return. A discount, a voucher, an entry into a draw, an extra service thrown in. The moment there is an inducement, the opinion is something you paid for.

Never write it for them, and never edit what they send you first. Suggested wording, a template, a helpful draft to make it easier. Once you have shaped the words, they are your words, and your words about your own clinical care are advertising.

Your reply is your advertising, and a privacy problem too

The review sits outside your control. Your reply does not. Anything you write underneath is published by you, about a regulated health service, which puts it inside the same rules.

There is a second issue underneath that one. A reply that names someone's treatment, thanks them for their progress, or even says it was lovely to see them, confirms that person was a patient. They may have chosen to disclose that themselves. Confirming it is still your disclosure, on a public page, about someone else's health.

The safe reply is short, warm and non clinical. Thank them for the feedback. Do not name the treatment, do not comment on how they are doing, and do not confirm or deny that they were ever seen. The same shape works for a negative review, where the temptation to correct the record is much stronger and the risk is much higher.

What to do with your best reviews instead

None of this means your reviews are wasted. They are doing real work where they sit, and there are several ways to get value from them without lifting a single sentence into your advertising.

Four ways to use reviews you are allowed to use

Move one

Let them do their job on the profile.

Volume and recency of reviews feed how you show up in the local map results. That is where a strong review base pays you back, and it costs you nothing in compliance risk.

Move two

Use the rating, not the words.

An overall star rating and review count shown as a rating is generally accepted, where quoting the clinical content of the reviews is not. The aggregate is a measure. The sentences are testimonials.

Move three

Mine them for your own copy.

Read what patients actually worried about before they booked, then answer those worries in your own voice on your own page. Their language is a research asset even when it cannot be a quote.

Move four

Audit what is already published.

Your website testimonials page, your review extensions in Google Ads, your old social posts. Most clinics find something inherited that nobody remembers approving.

Before you publish the next one

Run your ad copy through the AHPRA checker.

Paste your headline, description or landing page copy and it flags the testimonial, guarantee and superlative patterns that get clinic ads pulled, with a cleaner way to say each one.

Check my ad copy

Common questions

The questions that come up most often.

Can I show my Google star rating in my ads?

The rating itself, shown as a rating with the number of reviews behind it, is generally accepted. The problem starts when review text is pulled into the ad and that text describes clinical care or an outcome. Automated review extensions are the usual culprit, because they publish whatever your reviews happen to say without anyone at the clinic choosing the words. Control what appears in your ads manually.

Do I have to take down a review that talks about someone's treatment?

No. Reviews posted by patients on a platform you do not control are not your advertising, and you are not expected to moderate them or ask for them to be removed. The obligation attaches when you take that content and republish it yourself. Leave it where it is and it stays the patient's statement rather than your claim.

Can my front desk ask patients for a review at the end of an appointment?

Yes, as long as the ask is the same for everyone, nothing is offered in return, and nobody suggests what to write. A simple, consistent request that goes to every patient is fine. A request that goes only to patients someone has judged likely to be positive, or that comes with a discount attached, is where clinics get into trouble.

What about reviews from other practitioners rather than patients?

Reviews from professional peers, other clinicians, GPs, allied health colleagues, are generally not classed as patient testimonials, because the reviewer is not in a clinical relationship with you as a patient. The line is whether the person writing has received the service. If they have, it is restricted regardless of their profession.

Want this for your clinic?

We'll show you what good looks like for your account.

Send us your Google Ads account access. We'll send back a written audit covering wasted spend, missed opportunities, and the fixes we'd make first.

More insights

Keep reading.